Microsoft Office applications fail to properly handle GIF images. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system.
Microsoft Office applications fail to properly parse GIF images. When an Office document containing a malformed GIF image is opened with an Office application, system memory can be corrupted in a way that may allow an attacker to execute arbitrary code.
More information, including a list of affected Office applications, is available in Microsoft Security Bulletin MS06-039.
A remote, unauthenticated attacker may be able to execute arbitrary code.
Apply a patch from your vendor
Do not access Office documents from untrusted sources
This vulnerability was reported in Microsoft Security Bulletin MS06-039. Microsoft credits the NSFocus Security Team with providing information regarding this vulnerability.
This document was written by Jeff Gennari.
|Date First Published:||2006-07-11|
|Date Last Updated:||2006-07-11 21:07 UTC|